NIST AI RMF Alignment CRAGE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A government agency has implemented the NIST AI RMF for its AI systems. After one year, the agency wants to ensure continuous improvement. Which action best aligns with the RMF's continuous improvement principle?

   • AFreeze the risk management process after initial implementation to ensure consistency.
   • BOutsource risk management to an external consultant to handle all updates.
   • COnly update the risk management approach after a major incident occurs.
   • DConduct periodic reviews of AI risk assessments, incorporate feedback from incidents and stakeholder input, and update the risk management approach accordingly.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A small startup is adopting the NIST AI RMF for its AI-powered customer service chatbot. The startup has limited resources and a low tolerance for regulatory risk. Which approach to profiles and tiers is most appropriate?

   • ACreate a current profile but do not set a target profile, as the startup can improve later.
   • BAdopt the highest tier for all functions to ensure maximum risk management, regardless of resource constraints.
   • CUse a target profile that reflects the startup's desired risk management state, and select a tier that matches its resource constraints while still meeting regulatory expectations.
   • DSkip profiles and tiers entirely and implement a one-size-fits-all risk management process.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A city government is planning to deploy an AI system for traffic management. The project team is beginning the Map function. Which activity should they perform first to align with the RMF?

   • ADefine quantitative performance metrics such as average delay reduction.
   • BSelect the AI vendor and finalize the procurement contract.
   • CIdentify the specific problem the AI system will solve, the affected communities, and the potential impacts on traffic flow and public safety.
   • DDraft a public communication plan to announce the system's deployment.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary focus of the Measure function in the NIST AI RMF?

   • AImplementing risk mitigation plans
   • BEstablishing governance policies for AI use
   • CAssessing and measuring AI risks using quantitative and qualitative methods
   • DIdentifying the stakeholders affected by the AI system
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which set of core functions is defined in the NIST AI RMF?

   • AGovern, Map, Measure, Manage
   • BPlan, Do, Check, Act
   • CAssess, Design, Develop, Deploy, Monitor
   • DIdentify, Protect, Detect, Respond, Recover
   Reveal Solution Discussion Select an answer first